CVE-2023-0462
Fixed in a distro release EPSS <1%CVSS 8.0
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.
Products: Red Hat Satellite 6
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.11 | foreman | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-cli | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-cli | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-debug | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-debug | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-dynflow-sidekiq | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-dynflow-sidekiq | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-ec2 | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-ec2 | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-gce | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-gce | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-journald | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-journald | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-libvirt | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-libvirt | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-openstack | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-openstack | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-ovirt | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-ovirt | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-postgresql | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-postgresql | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-service | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-service | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-telemetry | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-telemetry | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | foreman-vmware | 0:3.1.1.27-1.el7sat |
| Red Hat satellite 6.11 | foreman-vmware | 0:3.1.1.27-1.el8sat |
| Red Hat satellite 6.11 | puppet-agent | 0:7.26.0-3.el7sat |
| Red Hat satellite 6.11 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite 6.11 | rubygem-git | 0:1.18.0-0.1.el8sat |
| Red Hat satellite 6.11 | tfm-rubygem-git | 0:1.18.0-0.1.el7sat |
| Red Hat satellite 6.11 | yggdrasil-worker-forwarder | 0:0.0.3-1.el8sat |
| Red Hat satellite 6.11 | yggdrasil-worker-forwarder | 0:0.0.3-1.el7sat |
| Red Hat satellite 6.12 | foreman | 0:3.3.0.23-1.el8sat |
| Red Hat satellite 6.12 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite 6.12 | rubygem-git | 0:1.18.0-1.el8sat |
| Red Hat satellite 6.12 | rubygem-safemode | 0:1.3.8-1.el8sat |
| Red Hat satellite 6.12 | yggdrasil-worker-forwarder | 0:0.0.3-1.el8sat |
| Red Hat satellite 6.13 | foreman | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-cli | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-debug | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-dynflow-sidekiq | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-ec2 | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-journald | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-libvirt | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-openstack | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-ovirt | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-postgresql | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-service | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-telemetry | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | foreman-vmware | 0:3.5.1.23-1.el8sat |
| Red Hat satellite 6.13 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite 6.13 | python-django | 0:3.2.21-1.el8pc |
| Red Hat satellite 6.13 | python-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite 6.13 | python39-django | 0:3.2.21-1.el8pc |
| Red Hat satellite 6.13 | python39-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite 6.13 | rubygem-git | 0:1.18.0-1.el8sat |
| Red Hat satellite 6.13 | yggdrasil-worker-forwarder | 0:0.0.3-1.el8sat |
| Red Hat satellite capsule 6.11 | foreman | 0:3.1.1.27-1.el7sat |
| Red Hat satellite capsule 6.11 | foreman | 0:3.1.1.27-1.el8sat |
| Red Hat satellite capsule 6.11 | foreman-debug | 0:3.1.1.27-1.el7sat |
| Red Hat satellite capsule 6.11 | foreman-debug | 0:3.1.1.27-1.el8sat |
| Red Hat satellite capsule 6.11 | puppet-agent | 0:7.26.0-3.el7sat |
| Red Hat satellite capsule 6.11 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite capsule 6.12 | foreman | 0:3.3.0.23-1.el8sat |
| Red Hat satellite capsule 6.12 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite capsule 6.13 | foreman | 0:3.5.1.23-1.el8sat |
| Red Hat satellite capsule 6.13 | foreman-debug | 0:3.5.1.23-1.el8sat |
| Red Hat satellite capsule 6.13 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite capsule 6.13 | python-django | 0:3.2.21-1.el8pc |
| Red Hat satellite capsule 6.13 | python-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite capsule 6.13 | python39-django | 0:3.2.21-1.el8pc |
| Red Hat satellite capsule 6.13 | python39-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite utils 6.11 | foreman | 0:3.1.1.27-1.el7sat |
| Red Hat satellite utils 6.11 | foreman | 0:3.1.1.27-1.el8sat |
| Red Hat satellite utils 6.11 | foreman-cli | 0:3.1.1.27-1.el7sat |
| Red Hat satellite utils 6.11 | foreman-cli | 0:3.1.1.27-1.el8sat |
| Red Hat satellite utils 6.12 | foreman | 0:3.3.0.23-1.el8sat |
| Red Hat satellite utils 6.13 | foreman | 0:3.5.1.23-1.el8sat |
| Red Hat satellite utils 6.13 | foreman-cli | 0:3.5.1.23-1.el8sat |